Description
Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
References
- TA11-102A third-party-advisory
- 39122 third-party-advisory
- 71766 vdb-entry
- 20110412 ZDI-11-120: Microsoft Office Excel RealTimeData Record Parsing Remote Code Execution Vulnerability mailing-list
- 47243 vdb-entry
- oval:org.mitre.oval:def:11676 vdb-entry signature
- 1025337 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-11-120
- MS11-021 vendor-advisory
- ADV-2011-0940 vdb-entry